Detection, prevention and recovery controls against malware with user awareness (ISO/IEC 27002:2013, 12.2.1) applied to the community: shared items and the community's distribution channels screened, since a compromised member can propagate malware to every other member through the trust the community creates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.